Re: [cobalt-users] Bug,- Security Risk, or May Bad?

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Sonny Kupka wrote:

> Neither the Site or the Admin user has Telnet/Shell rights.
> 
> To me this is a bug and a very big security issue.

I just tested this.  I booted my virgin RaQ3i.

I created a dummy site.  <www.foobar.com> at IP# 192.168.0.99.  I
specifically left unchecked the shell access option.

I created a user, Joe User (username: joe).

I tried telnetting in as Joe.  I got a "you're not allowed" message.

If you're not having the same experience, you need someone either from
Cobalt or some third-party support company <ahem> to look at your RaQ3.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205